Skip to content

ESET Threat Report T2 2021 highlights aggressive ransomware tactics and intensifying password-guessing attacks

BRATISLAVA – ESET released today its T2 2021 Threat Report, summarizing key statistics from ESET detection systems and highlighting notable examples of ESET’s cybersecurity research, including exclusive, previously unpublished updates on current threats. The latest issue of the ESET Threat Report highlights several concerning trends that were recorded by ESET telemetry, including increasingly aggressive ransomware tactics, intensifying brute-force attacks, and deceptive phishing campaigns targeting people working from home who have gotten used to performing many administrative tasks remotely. Ransomware, showing three major detection spikes during T2, saw the largest ransom demands to date. The attack shutting down the operations of Colonial Pipeline – the largest pipeline company in the US – and the supply-chain attack leveraging a vulnerability in the Kaseya VSA IT management software, sent shockwaves that were felt far beyond the cybersecurity industry. Both cases appeared to pursue financial gain rather than cyberespionage, with the perpetrators of the Kaseya attack setting a USD 70 million ultimatum – the heftiest known ransom demand so far. “Ransomware gangs may have overdone it this time: the involvement of law enforcement in these high-impact incidents forced several gangs to leave the field. The same can’t be said for TrickBot, which appears to have bounced back from last year’s disruption efforts, doubling in our detections and boasting new features,” explains Roman Kováč, chief research officer at ESET. On the other hand, the final shutdown of Emotet at the end of April 2021 saw downloader detections down by half compared to T1 2021 and a reshuffling of the whole threat landscape. Password-guessing attacks, which often serve as a gateway for ransomware, saw further growth in T2. Between May and August 2021, ESET detected 55 billion new brute-force attacks (+104% compared to T1 2021) against public-facing Remote Desktop Protocol services. ESET telemetry also saw an impressive increase in the average number of daily attacks per unique client, which doubled from 1,392 attempts per machine per day in T1 2021 to 2,756 in T2 2021. The exclusive research presented in the T2 2021 Threat Report includes findings about the highly targeted DevilsTongue spyware, which is used to spy on human rights defenders, dissidents, journalists, activists, and politicians; and a new spear phishing campaign by the Dukes APT group, which remains a prime threat to Western diplomats, NGOs, and think tanks. A separate section describes new tools employed by the highly active Gamaredon threat group targeting governmental organizations in Ukraine. The ESET T2 2021 Threat Report also reviews the most important findings and achievements by ESET researchers: a new cross-platform APT group targeting both Windows and Linux systems; a myriad of security issues in Android stalkerware apps; and a diverse class of malware targeting IIS servers, highlighted in the Featured story section. Finally, the report offers an overview of several talks given by ESET researchers and experts during the past few months and introduces talks planned for Virus Bulletin, AVAR, SecTor, and many other conferences. It also provides a general outlook of ESET’s participation in the MITRE Engenuity ATT&CK® evaluation, which will focus on tactics, techniques and procedures applied by the Wizard Spider and Sandworm APT groups. ESET’s outstanding visibility into both adversary groups’ behaviors could have a significant positive impact on ESET’s results in this evaluation. For more information, check out our ESET Threat Report T2 2021 on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

訊連科技推出全新威力導演、相片大師及創意導演 整合超過8百萬款專業影音素材及全新AI編修工具

2021916日,台北訊】多媒體創作軟體領導廠商訊連科技(5203.TW)今日發布全新一代多媒體剪輯軟體,包含「威力導演 365」、「相片大師 365」及「創意導演 365」等365訂閱版軟體。於本次更新中,訊連整合了iStock by Getty Images™及ShutterStock®等知名圖庫網站之專業素材,提供訂閱用戶高達8百萬筆的各式影片、相片、音樂免版稅授權素材,可自由使用於各式影、音創作之中。此外,也推出了包含置換天空、物件選取、移除風聲等全新AI工具,讓創作者更快速、直覺地打造出吸睛的影片、相片創作。此外,訊連也宣布此更新版本全面支援10月5日上市的Windows 11。

訊連科技推出全新威力導演、相片大師及創意導演 整合超過8百萬款專業影音素材及全新AI編修工具

 

「影音創作近年來已成為全民運動,不論是初學者或是專業創作者,直覺的編修工具及豐富的素材,都是創作過程中不可或缺的。」訊連科技執行長黃肇雄表示:「此次創意導演、威力導演及相片大師的升級,除了運用AI技術的多樣全新強大功能、優化使用者介面外,亦整合並擴充享譽國際的兩大專業素材庫Shutterstock與iStock by Getty Images,提供訂閱用戶數超過八百萬款影音素材,協助各種創作者打造令人驚豔的專業作品。」

 

365訂閱戶專屬】內建超過8百萬款的專業影音素材庫,並每月追加創作套件

全新的「威力導演365」及「創意導演365」中,除了擴充原有的ShutterStock素材庫,更進一步整合了Getty Images旗下的iStock圖庫,共計提供超過8百萬筆的專業影片、相片、音樂,可大幅提升專業影音創作者之創作效率,並省卻額外購買付費素材之費用。而於「相片大師365」中,則提供高達4百萬款的相片及音樂素材,讓創作者可免去單張購買圖庫之麻煩,並為相片幻燈片秀加上適合之音樂。此外,訊連也針對訂閱用戶,每月提供新的設計範本,如標題、轉場、特效、貼圖等。

 

【威力導演365】全新AI工具及專業創作流程優化

威力導演365推出採用AI技術的全新創作工具,包含置換天空、物件選取、移除風聲等,提供更智慧、直覺的影片剪輯工具。針對專業創作者,威力導演亦新增音樂自動符合片長功能,根據影片長度智慧調整背景音樂,簡化手動剪輯的繁複流程。強化的遮罩與混合工具、新增不同輸出比例及更加優化的使用介面,從初學創作者到影音玩家都能打造專業級作品。

 

於2020年底問世的「威力導演365 macOS版」此次更新也帶來更多豐富特效及強大的編輯工具,如形狀設計師、進階遮罩與混合、色調調節及光線調整等,讓廣大macOS用戶也能享受威力導演備受好評的直覺使用體驗、輕鬆創作吸睛影片,並可透過訊連線上商城或Mac App Store購買。

 

相片大師365】全新AI工具、讓靜態相片動起來

「相片大師365」Windows 及 MacOS版本皆新增全新的AI置換天空、動態照片、動態照片音效等功能,讓靜態照片升級為超現實的動態創作。優化的圖層編輯工具和引導式編輯流程,使影像合成更加輕鬆寫意。亦提供更多光線效果、色調調節選項及物件分割等工具,協助使用者發揮創意打造大師級作品。

 

【創意導演365】四大創作軟體 + 豐富追加內容,打造全方位專業剪輯工作室

「創意導演365」是全方位的多媒體創作軟體,整合最新版本之威力導演、相片大師、AudioDirector及ColorDirector等四套旗艦創作軟體,創作者不僅能打造吸睛的影片與相片,更可透過強大的音訊編輯和精準影片調色工具,使多媒體作品更加專業。

 

針對「創意導演365」、「威力導演365」、「相片大師365」、「AudioDirector 365」及「ColorDirector 365」之訂閱戶,除了每個月更新專屬的特效、背景音樂、音效等素材擴充外,更享內建Shutterstock及iStock by Getty Images影音素材庫無限使用,訂閱用戶可由程式中瀏覽、下載超過八百萬款影片、圖像及音樂素材。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

關於CyberLink
訊連科技創立於1996年,擁有頂尖視訊與音訊技術的影音軟體公司,專精於數位影音軟體及多媒體串流應用解決方案產品研發,並以「抓準技術板塊,擴大全球行銷布局」的策略,深根台灣、佈局全球,展現亮麗的成績。訊連科技以先進的技術提供完美的高解析影音播放效果、以尖端的科技提供完整的高解析度擷取、編輯、製片及燒錄功能且完整支援各種高解析度影片及音訊格式。產品包括:「威力導演」、「PowerDVD」、「威力製片」、「威力酷燒」等。

Key concepts of systems and networks

Together we check out the key concepts of systems and networks

In the middle of the information century, who has not surfed the Internet or used a computer, be it a desktop or a laptop? But do you really know what a computer is and what it is made of? and what about the Internet?

It is important to know at least the most superficial layer of something as important as computer systems and networks, and therefore, we are going to talk about the key concepts of these two topics.

A computer system is a device made up of the union of hardware and software, which allows the use of this system by a person, whether qualified or not, that depends on the purpose of the system.

But, what does “hardware” and “software” mean? Let’s talk a little more about it.

You can define as hardware the set of physical components that make up a computer system. We are going to define the main components of a computer system, although there are a few more:

  • Processor: It is the component in charge of executing all the system programs. It is in turn made up of one or more CPUs.
  • RAM memory: This component stores the data and instructions executed by the CPUs and other system components.
  • Hard Drives: Information and content are stored here in computer systems.
  • Motherboard: It is the component where the others are located, and works as a bridge for communication between them.

Well, now that we have a basic understanding of what hardware is, we move on to software.

Software are all the programs that run on a computer system, among which you may differentiate three types of software:

  • System Software: It is responsible for the proper functioning of the operating system and hardware in general, such as device drivers.
  • Programming software: They are tools whose sole purpose is the development of new software.
  • Application software: It is any program designed to perform one or more specific tasks, for example video games or applications designed for business or education.

We already know what a computer system is, but without communication with the outside we are not making the most out of the potential that these systems have (which is a lot), so we decided to connect it to that abstract site full of information and services: the ‘Internet’.

Everyone knows the term “Internet”, but do we know what the “Internet” is?
We could say that the Internet is the great global network that unites all existing devices, allowing communication between all of them from anywhere on the planet. In turn, this large network is made up of other smaller networks, such as those of a country, city, neighborhood, etc.
Mainly, we distinguish three types of networks:

  • LAN: It is the smallest network, a local area network, such as the one in work areas or the one you have at home.
  • MAN: It is a somewhat larger network, being able to cover from neighborhoods to cities. They can also be the networks used by large companies for communication between their different offices.
  • WAN: It is a network that connects countries or even continents to each other, not devices. We can say that the Internet is the ultimate WAN network.

Ok, we already know what the Internet is made of. But, how do devices communicate on these networks? There are systems used to identify each computer on the network, known as IP addresses. An IP address is, basically, the ID or identifier of a device, so it is unique and unrepeatable.

At the beginning, when the idea of an IP address was created, there were only a few dozen computers in the whole world, and this, as we already know, has gotten quite out of control since then. As a result of this increase, they decided to come up with a new concept, known as DNS (for its acronym Domain Name System).

What the DNS protocol does is, basically, translate the domain name that we enter, either in the web browser or in any other program, and convert it into an IP address, with which it communicates with the destination. Of course, all domain names are stored on DNS servers, scattered around the world to avoid connection overload, and to avoid slow name resolutions.

There are a large number of protocols, each with a different purpose. These protocols are grouped in layers, such as application, transport, Internet or access to the network, according to the TCP/IP model. But, that’s not all. We still lack another important concept in relation to communications between devices, what we know as “ports” of a computer system.

Imagine a road, if all the traffic that wants to enter a city only had a single road, what would happen? Well, the same thing happens in computing, and that is why these virtual ports exist.

These ports range from 0 to 65535, but the first 1024 are reserved for “important” protocols, such as the DNS protocol, which we have mentioned above, belonging to the application layer and that uses port 53 for both UDP and TCP connections.

TCP and UDP are two protocols belonging to the transport layer, whose main difference is that the TCP protocol is connection-oriented. That is, the TCP protocol makes sure that the data reaches its destination, while the UDP protocol sends the data, faster but less securely. This data may even not arrive or at least not fully arrive.

The protocols for web connections or HTTP/HTTPS, both belong to the application layer. Depending on which one you choose, it uses a different port. That is, for HTTP connections, port 80/TCP is used, although it is deprecated due to its lack of security, so the standard has become HTTPS connections, which use port 443/TCP and include a security layer based on SSL/TLS.

Connections made through safe channels or SSH, also from the application layer, use port 22/TCP, and thus we could continue with lots of other protocols.

Of course, these ports are a standard in the systems that receive the requests, the client that initiates the request can use any port that is not reserved to send the request and receive this data. As you can see, this is much easier to communicate with servers, although they can also modify their default ports, but the normal thing is that they do not do so if they want to provide a public service.

Finally, we are going to talk about a concept that, due to the pandemic, is the order of the day: the VPN.

As its name indicates (Virtual Private Network), we can define a VPN as a network “tunnel” that is created between client and server, where data are fully encrypted and sent through the Internet. The common use of VPNs is anonymity on the network, since the IP that is exposed is that of the VPN server, or, also, to be able to visit pages that cannot be accessed from the source country.
In the business environment, this tunnel allows direct communication between the client device with any other device in the network of that server, which allows access to an environment as if we were physically in the office of our company. It also allows access control and registration, which otherwise could not be done.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

WHAT’S NEW Pandora FMS 757

What’s new in Pandora FMS latest release, Pandora FMS 757

Let’s check out together the features and improvements related to Pandora FMS new release: Pandora FMS 757.

NEW FEATURES AND IMPROVEMENTS

Internal messaging system in the Metaconsole

The messaging system has been implemented in the Metaconsole, which now also allows seeing, similarly to nodes, update notices, messages from other users and system notes.

New documentation in Russian

Although the translation is not yet 100% complete, we’re proud to say that the official Pandora FMS documentation is already in five languages: Spanish, English, French, Japanese and now… Russian!

Collection of new plugins

  • Openstack Plugin

New Open Plugin. It captures data from hypervisors and instances remotely through the openstack api.

  • Pandora MongoDB

New Enterprise plugin. It obtains server stats, the databases and their collections. Remote plugin, with support for Mongo Atlas.

  • Plugin Ldap

New Open plugin, it connects to an ldap account and collects stats related to operations, connections, statistics or waiters.

  • Plugin Nginx

Enterprise plugin update. Updated to python 3.

  • Plugin VMware

Enterprise plugin update. Added a Reject parameter to discard agent IP automatic update.

  • Cisco configuration Inventory Plugin

Enterprise plugin update. Added support for Spanish language systems.

  • Plugin Inventario Cisco configuration

Enterprise inventory plugin update. Added option to define credentials in execution parameters.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Scale Computing Continues to Deliver High-Performing, Scalable Edge Computing and IT Infrastructure to the Government Sector

INDIANAPOLIS – September 222021 – Scale Computing, a market leader in edge computing, virtualization, and hyperconverged solutions, today announced ongoing momentum with customers in the public sector. The company’s HC3 Edge and IT infrastructure solutions continue to enable municipal institutions of all sizes to optimize operations with self-healing, automated infrastructure for all applications while protecting sensitive government data.

“In today’s world, IT management is tasked more than ever with simplifying infrastructure and delivering solutions to employees and citizens that mitigate risks in a whole new way. IT departments need to ensure that hardware and software are reliable, remotely accessible, and protected against cyberthreats,” said Jeff Ready, CEO and co-founder of Scale Computing. “Scale Computing meets the complicated IT infrastructure demands of state and local governments. Our agile, reliable platforms can replace traditional IT infrastructure across any agency, any department, or any system, while driving out the high costs of downtime and system administration.”

Scale Computing brings municipal institutions, including governments, government agencies, and other public institutions, into a new era of computing by revamping IT operations with a solution that simplifies management, protects sensitive government data, and helps deliver smart, digital services.

Kitselas First Nation is a self-funded and self-governing nation, and one of the 14 Tsimshian tribes in British Columbia. After experiencing a flood, Kitselas First Nation needed new servers and a modern solution for simplicity, scalability, availability and disaster recovery. With only one person on the IT staff, they were also in need of powerful systems capable of running workloads with efficiency and speed, as well as an affordable, easy-to-use solution capable of maximizing uptime.

Kitselas First Nation selected Scale Computing’s HC3 platform which provides them with simplified, highly affordable IT infrastructure with improved performance. Since implementation of Scale Computing HC3, Kitselas First Nation saved resources and 15% of time spent managing infrastructure, leading to an increase in time spent working on other projects. Scale Computing’s HC3 solution also provides Kitselas First Nation with disaster recovery and the ability to manage IT infrastructure without the need for local IT staff.

Don Agnew, IT support and asset management officer at Kitselas First Nation, says, “We have an on-site backup and a Google Cloud Platform in Quebec. If another disaster strikes, the hardware component fails or the entire HC3 appliance breaks down, we’re covered. The Scale Computing HC3 cluster is highly available and keeps our systems running with no downtime. HC3 won’t let us down.”

The Summit County Board of Elections in Ohio is responsible for securely managing the records of 370,000 registered voters and over one million citizen records. As Ohio’s fourth most populous county, the Summit County Board of Elections’ entire network infrastructure is managed by a team of just two full-time IT professionals. With an aging server infrastructure and a heavily scrutinized Presidential election fast approaching in 2020, this IT duo needed to modernize their systems, comply with strict new security directives, and do so in an expedited time-frame.

After selecting Scale Computing’s HC3 solution, the Summit County Board of Elections was able to consolidate seven servers to a cluster of three HC3 notes in less than seven months, implement automated snapshots of servers that are backed up to a remote cluster providing full system redundancy, simplify management and operations so their two-person IT team could focus on operational priorities, and comply with new state and Federal security directives.

As Kevin Moreland, Network & Systems Administrator, Summit County Board of Elections says, “Every decision we make comes down to, ‘can you make it through a Presidential election’? We knew we needed something that was intelligent, scalable, had built-in redundancy, and was cost-effective. Scale has delivered on all of these and more. We went from an environment where we had about seven physical servers to a three node cluster. From that three node cluster, then we can spin up as many virtual servers as warranted by demand – this not only simplified our operational workload but it also dramatically shrunk our eco-footprint.”

We wanted something highly available, redundant, scalable, affordable, and easy-to-use. We’re happier than we’ve ever been. Scale Computing has been an awesome product.

Chris Iseral, Chief Information Officer of Madison County, Kentucky, was challenged with upgrading old infrastructure in an affordable way. The infrastructure in Madison Country includes 700 users in 26 different facilities across the country, accounting for 23 different departments or agencies. Chris’ challenges included multiple vendors and an expensive, complicated, and aging infrastructure. Madison County, Kentucky partnered with Scale Computing to deliver high quality, responsive, and budget friendly infrastructure that simplifies management, protects sensitive government data, and helps deliver smart, digital services anywhere, anytime. As Chris Iseral says, “We wanted something highly available, redundant, scalable, affordable, and easy-to-use. We’re happier than we’ve ever been. Scale Computing has been an awesome product.”

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.